Post #5503 117 Sep 30, 2026, 15:25 UTC From BlackCat to Panda Workshop: Inside the Evolving C2 Panel Behind RATHat@reconcore Cleafy From BlackCat to Panda Workshop: Inside the Evolving C2 Panel Behind RATHat | Cleafy Cleafy's TIR team analyzed the operator infrastructure behind RATHat, an Android banking trojan that abuses Accessibility Services to enable wireless debugging on the victim's phone, obtain a shell, and deploy a hidden native service outside the app. The…